Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
File:                     6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json)
Hash identifier:          cU7irBlLbY4bswJsAWGFgNdRbSd/CKzwUENsopGvSN8=
Subject key identifier:   1A:D6:77:74:CA:01:3E:E1:5D:CA:0E:C2:16:4A:A1:85:5C:C9:3B:13
Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93
Certificate issuer:       /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
Manifest number:          6F
Signing time:             Fri 31 Jan 2025 05:55:32 +0000
Manifest this update:     Fri 31 Jan 2025 05:55:32 +0000
Manifest next update:     Fri 07 Feb 2025 05:55:32 +0000
Files and hashes:         1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: DuwCtr8jRZZf8E7cZPsyuJc0BHqSUcB6ik5jThjF6ag=)
                          2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: 6q2HJGghYczmtOW7uCV2DY5B1dnxfLxnRSXR0JIpe1c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193
        Validity
            Not Before: Jan 31 05:55:32 2025 GMT
            Not After : Feb  7 05:55:32 2025 GMT
        Subject: CN=679c65d4-766a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c1:d7:69:76:0a:83:ac:e6:0d:f8:ac:e2:05:
                    98:e0:fb:1c:0e:d4:2f:c6:9a:b3:f1:44:b2:47:1a:
                    1a:f6:26:f3:23:bd:95:cf:0d:4f:1b:55:3f:ce:01:
                    74:a1:86:43:d9:c0:31:b4:c4:7a:b1:57:4a:f4:cb:
                    20:ac:3d:94:3a:33:d9:9a:b0:22:ab:e3:f9:65:7d:
                    ad:ba:04:5d:c5:4b:c2:8f:07:f4:bf:39:5d:36:0f:
                    74:c0:0a:79:02:5a:f6:42:54:0b:11:52:59:fb:ef:
                    64:05:a9:c0:16:0b:c2:5f:27:aa:da:af:6f:c3:1a:
                    d8:dc:49:3d:bb:7d:75:b7:d2:81:18:0a:4d:d8:13:
                    51:f5:5e:53:a0:32:54:a0:ed:ad:c4:11:1d:ea:0a:
                    73:4d:72:2a:7f:b0:c1:35:fe:6e:14:33:37:be:75:
                    a7:02:79:28:10:cc:4f:a0:d1:22:18:bd:20:8e:37:
                    39:e6:d0:ff:9d:d3:f5:1d:08:de:92:59:57:6c:0e:
                    74:8c:92:5e:1e:64:c4:68:76:c4:3a:b1:48:a6:fd:
                    5b:5f:cc:cf:ec:93:46:56:00:e5:86:72:af:7e:47:
                    37:e5:ca:32:75:ed:99:49:57:b7:b3:ad:e7:e8:fd:
                    5a:4a:c8:c6:bf:16:a6:fb:0d:01:cc:06:f3:0f:6c:
                    1a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D6:77:74:CA:01:3E:E1:5D:CA:0E:C2:16:4A:A1:85:5C:C9:3B:13
            X509v3 Authority Key Identifier:
                keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:00:12:9f:8c:cd:5c:5d:14:86:df:e8:a4:0a:84:0c:71:cd:
         a5:a7:76:51:5e:e7:8d:97:96:f3:29:af:0e:1c:1a:78:c5:2b:
         bb:8d:80:03:3c:6d:07:34:bf:bf:18:8a:c2:5e:db:84:8a:ad:
         3e:55:5d:ba:7f:c8:17:40:62:a8:79:24:4b:0f:51:0c:95:2f:
         a4:48:32:63:12:05:b1:53:8f:2b:b0:da:e7:dd:67:3f:ee:00:
         aa:4e:8e:c1:1a:e9:0f:21:59:c2:1f:da:fe:27:ca:fe:34:11:
         a8:aa:40:56:22:88:cb:de:fd:92:bf:1c:a7:b7:79:63:0a:56:
         e7:c8:ae:d4:9c:fa:7f:5a:2d:10:5d:f5:39:79:10:ac:ba:93:
         ea:e8:1b:b0:47:2b:26:2a:79:09:8b:7e:35:d9:78:b9:86:a5:
         06:8d:f7:d5:10:b6:96:33:dd:98:c2:4d:e8:71:6e:18:e6:42:
         3b:bf:b6:ec:b8:fc:cf:ce:22:5b:3a:74:bd:92:8e:70:5f:1f:
         d3:f8:02:49:cd:1b:5f:85:54:70:e6:e1:a0:7d:90:98:b4:ed:
         b5:2d:41:ec:00:2e:76:44:aa:d6:49:bb:a0:f3:93:c7:26:b1:
         c3:1e:f1:63:8a:e6:f6:65:85:a3:fd:bf:5c:cd:d3:7b:b9:0e:
         a0:e5:23:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:08:04 2025 by rpki-client